This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json) Hash identifier: c7x2F8nRZjU6PoxlzvOxPmwj1R8np4h3MpCVbiFz2F8= Subject key identifier: B4:A0:08:F0:2F:96:8D:B9:00:94:81:18:E3:1F:3E:7C:BD:ED:38:3C Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Certificate serial: 019B529832853B54AE64168B7A73608A6F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft Manifest number: 06F2 Signing time: Wed 24 Dec 2025 23:01:04 +0000 Manifest this update: Wed 24 Dec 2025 23:01:04 +0000 Manifest next update: Thu 25 Dec 2025 23:01:04 +0000 Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: 9uE0Ow26veK6A/DPfjcB50+qW1nKB+yxosV/obGh904=) 2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:32:85:3b:54:ae:64:16:8b:7a:73:60:8a:6f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Validity Not Before: Dec 24 23:01:04 2025 GMT Not After : Dec 25 23:01:04 2025 GMT Subject: CN=b4a008f02f968db900948118e31f3e7cbded383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:28:51:de:be:13:45:27:60:88:09:89:92: 28:76:32:ad:70:80:59:a3:e0:7f:c8:f3:2d:24:95: e4:c1:f5:a6:1c:ca:d9:e6:65:fc:43:69:18:ad:b7: 65:a9:bd:95:03:ea:3c:b0:99:c9:55:42:e5:1a:a3: 80:2f:54:7e:d7:6b:93:be:5a:12:14:5f:75:52:d3: 80:34:ad:e3:58:6d:b8:a7:30:8f:8a:7f:db:e5:9f: 6b:cd:46:22:b7:e8:a6:5c:97:4d:e9:d3:04:45:d0: 1f:ac:13:54:7c:e7:ef:1a:e7:9e:ec:7d:04:1b:e3: 15:eb:2a:97:c3:ec:0b:15:c4:ba:bc:93:ce:2a:4d: 6d:88:63:22:64:64:ee:08:52:08:36:f9:0e:5e:bb: c2:83:14:bf:93:f4:b8:e3:bc:8e:d1:a5:94:97:6e: e8:84:09:52:1c:0c:cc:77:6f:9b:ef:4d:ff:3e:fb: d7:77:2e:e7:b9:59:fe:95:36:2e:fd:4c:d3:c0:b3: dd:cb:d0:a0:a4:7d:e7:6c:5c:a7:d7:81:5e:78:bd: a6:0b:fe:70:cd:2a:84:6d:ab:f6:05:f0:20:3f:35: 66:29:a1:57:b4:57:28:45:6e:20:c7:21:62:87:73: 68:39:c3:33:bb:1e:b7:bb:03:14:a0:f3:49:c6:20: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A0:08:F0:2F:96:8D:B9:00:94:81:18:E3:1F:3E:7C:BD:ED:38:3C X509v3 Authority Key Identifier: keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5d:fe:39:07:d2:4d:09:23:7b:e7:27:64:01:e0:b1:d3:f3: f8:5d:65:69:21:d0:d0:5f:3f:7d:01:90:3c:66:77:b0:db:23: 3a:97:6b:af:cf:ce:59:97:51:b2:5f:2c:cb:ab:74:f3:34:64: 87:10:33:f0:b8:1c:09:83:7d:10:6d:1d:48:19:32:2c:23:5e: 46:b3:5e:80:fa:c6:82:2d:a2:f1:d6:b0:bf:ee:d7:2b:ad:16: 5e:27:ae:a9:57:68:c6:10:56:d9:1c:c3:96:8c:23:27:1f:18: 3c:4b:71:30:aa:c1:64:ad:65:16:12:0a:9d:f1:8c:25:42:77: b8:ba:1f:ef:5d:fd:23:87:a0:24:4c:56:88:58:a7:f9:6a:74: e5:bb:16:08:a3:9a:bc:3d:5f:47:18:11:e5:27:21:af:10:f7: db:25:eb:0d:4c:b8:a0:f0:09:ac:8b:62:e4:73:40:6f:6b:c7: f7:a7:d3:9d:4e:94:c7:93:0d:4c:60:49:41:1b:6c:ef:3a:ea: b9:78:23:da:da:e5:3c:85:c5:a7:01:be:5b:0b:c1:81:59:65: df:af:cd:7c:58:bb:ad:e2:1b:fe:db:13:fc:78:bc:dc:d5:a8: 90:34:fa:08:a9:b9:10:6d:7d:4a:cc:21:96:51:19:c0:68:f5: 68:0b:c9:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmDKFO1SuZBaLenNgim8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4 Y2ViY2EwHhcNMjUxMjI0MjMwMTA0WhcNMjUxMjI1MjMwMTA0WjAzMTEwLwYDVQQD EyhiNGEwMDhmMDJmOTY4ZGI5MDA5NDgxMThlMzFmM2U3Y2JkZWQzODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJIoUd6+E0UnYIgJiZIodjKtcIBZ o+B/yPMtJJXkwfWmHMrZ5mX8Q2kYrbdlqb2VA+o8sJnJVULlGqOAL1R+12uTvloS FF91UtOANK3jWG24pzCPin/b5Z9rzUYit+imXJdN6dMERdAfrBNUfOfvGuee7H0E G+MV6yqXw+wLFcS6vJPOKk1tiGMiZGTuCFIINvkOXrvCgxS/k/S447yO0aWUl27o hAlSHAzMd2+b703/PvvXdy7nuVn+lTYu/UzTwLPdy9CgpH3nbFyn14FeeL2mC/5w zSqEbav2BfAgPzVmKaFXtFcoRW4gxyFih3NoOcMzux63uwMUoPNJxiA4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSgCPAvlo25AJSBGOMfPny97Tg8MB8GA1UdIwQY MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl3+OQfS TQkje+cnZAHgsdPz+F1laSHQ0F8/fQGQPGZ3sNsjOpdrr8/OWZdRsl8sy6t08zRk hxAz8LgcCYN9EG0dSBkyLCNeRrNegPrGgi2i8dawv+7XK60WXieuqVdoxhBW2RzD lowjJx8YPEtxMKrBZK1lFhIKnfGMJUJ3uLof7139I4egJExWiFin+Wp05bsWCKOa vD1fRxgR5SchrxD32yXrDUy4oPAJrIti5HNAb2vH96fTnU6Ux5MNTGBJQRts7zrq uXgj2trlPIXFpwG+WwvBgVll36/NfFi7reIb/tsT/Hi83NWokDT6CKm5EG19Sswh llEZwGj1aAvJPw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:53 2025 by rpki-client